Deployment Architecture

Why is my search head missing in Distributed Management Console (DMC)?

Communicator

I'm sure this is going to be something simple. I have a small Splunk POC environment consisting of a cluster master, 3 indexers, and 2 search heads. When pulling up the DMC on the master, I see all 3 indexers, itself (the master), and 1 search head. But the other search head never shows up. I've even erased and reinstalled Spunk on this search head to no avail. It IS reporting to the license server, and I can search my data with it. Just can't see it in DMC.

Thanks

0 Karma

Path Finder

many thanks,

solution is right @ aaraneta
...and you are hosting the DMC on an instance other than the cluster master, you must add the cluster master as a search peer.

Works very well!

0 Karma

Path Finder

it is also very important to apply the changes by MC (button in the top right)

0 Karma

Splunk Employee
Splunk Employee

Did you manually add that search-head as a search peer on the DMC / Cluster Master instance? This is a required step:

Repeat steps 3 and 4 for each search head, deployment server, license master, and nonclustered indexer. Do not add clustered indexers, but you must add clustered search heads.

Communicator

Yes, I have added it as a search peer and it shows in the list as healthy. yet, does not show up in DMC.

0 Karma

Splunk Employee
Splunk Employee

That's unexpected. I'm not sure what to suggest besides attempting a factory reset of the DMC, which can be done via a dedicated button in the DMC general setup page.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!